lecture-security_engineering
lecture-security_engineering copied to clipboard
chore(deps): bump the prod-dependency group across 1 directory with 2 updates
Updates the requirements on rand and hex-literal to permit the latest version.
Updates rand to 0.9.0
Changelog
Sourced from rand's changelog.
[0.9.0] - 2025-01-27
Security and unsafe
- Policy: "rand is not a crypto library" (#1514)
- Remove fork-protection from
ReseedingRngandThreadRng. Instead, it is recommended to callThreadRng::reseedon fork. (#1379)- Use
zerocopyto replace someunsafecode (#1349, #1393, #1446, #1502)Dependencies
- Bump the MSRV to 1.63.0 (#1207, #1246, #1269, #1341, #1416, #1536); note that 1.60.0 may work for dependents when using
--ignore-rust-version- Update to
rand_corev0.9.0 (#1558)Features
- Support
stdfeature withoutgetrandomorrand_chacha(#1354)- Enable feature
small_rngby default (#1455)- Remove implicit feature
rand_chacha; usestd_rnginstead. (#1473)- Rename feature
serde1toserde(#1477)- Rename feature
getrandomtoos_rng(#1537)- Add feature
thread_rng(#1547)API changes: rand_core traits
- Add fn
RngCore::read_adapterimplementingstd::io::Read(#1267)- Add trait
CryptoBlockRng: BlockRngCore; maketrait CryptoRng: RngCore(#1273)- Add traits
TryRngCore,TryCryptoRng(#1424, #1499)- Rename
fn SeedableRng::from_rng->try_from_rngand add infallible variantfn from_rng(#1424)- Rename
fn SeedableRng::from_entropy->from_os_rngand add fallible variantfn try_from_os_rng(#1424)- Add bounds
CloneandAsRefto associated typeSeedableRng::Seed(#1491)API changes: Rng trait and top-level fns
- Rename fn
rand::thread_rng()torand::rng()and remove from the prelude (#1506)- Remove fn
rand::random()from the prelude (#1506)- Add top-level fns
random_iter,random_range,random_bool,random_ratio,fill(#1488)- Re-introduce fn
Rng::gen_iterasrandom_iter(#1305, #1500)- Rename fn
Rng::gentorandomto avoid conflict with the newgenkeyword in Rust 2024 (#1438)- Rename fns
Rng::gen_rangetorandom_range,gen_booltorandom_bool,gen_ratiotorandom_ratio(#1505)- Annotate panicking methods with
#[track_caller](#1442, #1447)API changes: RNGs
- Fix
<SmallRng as SeedableRng>::Seedsize to 256 bits (#1455)- Remove first parameter (
rng) ofReseedingRng::new(#1533)API changes: Sequences
- Split trait
SliceRandomintoIndexedRandom,IndexedMutRandom,SliceRandom(#1382)- Add
IndexedRandom::choose_multiple_array,index::sample_array(#1453, #1469)API changes: Distributions: renames
- Rename module
rand::distributionstorand::distr(#1470)- Rename distribution
StandardtoStandardUniform(#1526)- Move
distr::Slice->distr::slice::Choose,distr::EmptySlice->distr::slice::Empty(#1548)- Rename trait
distr::DistString->distr::SampleString(#1548)- Rename
distr::DistIter->distr::Iter,distr::DistMap->distr::Map(#1548)
... (truncated)
Commits
96f8df6Prepare 0.9.0 release (#1558)34da321Enablestdarch_x86_avx512for cpu hasavx512bw(#1551)b4b1eb7Re-org with distr::slice, distr::weighted modules (#1548)16eb7deAdd thethread_rngfeature flag (#1547)afa24e4Fix test status badges (#1544)c681dfcCreate FUNDING.yml9f05e22Update: getrandom v0.3.0 rc.0 (#1541)88c310bFix docs.rs build options (#1539)b879689Adjust GH Actions (#1538)3fac49fPrepare 0.9.0-beta.0 (#1535)- Additional commits viewable in compare view
Updates hex-literal to 1.0.0
Commits
863d4bfhex-literal: release v1.0.0 (#1154)9521e7ahex-literal: useconstblock to force const promotion (#1153)6045028Remove the hybrid-array dir (#1152)1701e2aUpgrade all crates to the 2024 edition and bump MSRV to 1.85 (#1149)b2cc53ainout: add changelog entry for v0.1.4 (#1151)a984ec9inout: fixInOutBufReserved::get_out_len(#1147)9d92d5ecpufeatures: release v0.2.17 (#1143)41a653aCI: update security-audit config (#1144)ca3d1c2cpufeatures: don't linkstdwhen linkinglibc(#1142)1517021opaque-debug: fix typo in example code (#1139)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions